Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203535303032.roa
File:                     34352e36352e3235342e302f32332d3234203d3e203535303032.roa (raw, json)
Hash identifier:          UPw3wf1XEuU+TayZX8r4SflCGbgx5wI2H+yQA2O+56c=
Subject key identifier:   6A:8C:AF:1A:B2:64:1D:F7:3D:7F:FE:67:F9:F0:FA:40:54:77:51:09
Certificate issuer:       /CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE
Certificate serial:       3E26E38F63F1C308CC2920F8E23C3B6225E767E1
Authority key identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203535303032.roa
Signing time:             Tue 04 Feb 2025 18:43:36 +0000
ROA not before:           Tue 04 Feb 2025 18:38:36 +0000
ROA not after:            Tue 03 Feb 2026 18:43:36 +0000
asID:                     55002
IP address blocks:        45.65.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 22:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:26:e3:8f:63:f1:c3:08:cc:29:20:f8:e2:3c:3b:62:25:e7:67:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE
        Validity
            Not Before: Feb  4 18:38:36 2025 GMT
            Not After : Feb  3 18:43:36 2026 GMT
        Subject: CN=6A8CAF1AB2641DF73D7FFE67F9F0FA4054775109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:79:a5:dc:d3:64:84:9a:02:65:b9:e2:5e:
                    aa:5f:7f:0b:b9:cb:5d:ec:79:61:65:56:09:cd:83:
                    5b:6f:c7:ce:7a:ca:ea:9b:0b:34:b9:82:5e:4e:fb:
                    3e:39:d6:30:af:57:15:2c:be:24:6f:a5:e1:9e:20:
                    5d:a9:fb:f0:f2:fc:21:7f:be:71:2c:ed:59:08:9e:
                    ef:d1:59:7c:29:67:fe:c6:28:4b:94:24:d7:19:9b:
                    b5:c0:d4:53:af:4a:bc:ab:1c:bf:de:c9:52:27:ba:
                    db:ae:bb:74:27:a1:5d:32:59:2d:d6:0b:f9:cd:cc:
                    d7:8a:91:9f:02:a0:17:15:b7:3b:c7:a4:f1:c5:ab:
                    f8:44:7a:f4:e2:95:45:58:aa:b5:3f:40:53:cf:bf:
                    8a:f8:ef:3a:5c:f8:46:6e:8c:7c:3f:dc:26:0e:b3:
                    71:c9:26:b6:f5:25:81:e8:6f:83:7c:c1:8f:fe:55:
                    13:b5:91:19:7f:ef:47:bd:52:78:ec:c4:78:98:60:
                    45:76:4b:ab:64:8f:31:d5:be:f0:f9:4b:30:47:cf:
                    d4:2e:33:6e:d6:e3:02:8d:11:f6:d4:55:72:41:95:
                    4e:97:90:29:dd:19:86:af:7d:60:b9:2c:60:94:8b:
                    6b:77:74:09:08:09:e6:a3:ff:c4:06:b1:83:9a:75:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8C:AF:1A:B2:64:1D:F7:3D:7F:FE:67:F9:F0:FA:40:54:77:51:09
            X509v3 Authority Key Identifier:
                keyid:79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:fa:0e:c2:03:95:c3:00:d4:44:1c:17:2f:65:99:9d:5a:
         22:4e:22:11:fe:6e:8f:d9:df:9b:c5:8e:dd:df:2d:06:c1:c4:
         c7:b4:06:ea:c2:f8:32:7b:27:f5:5a:62:6d:2d:18:91:7f:76:
         f6:db:f0:e4:0e:2d:a7:80:87:2b:fa:03:04:08:3b:3c:3b:46:
         59:20:ef:97:62:ab:8c:46:2c:2f:62:d0:59:1e:ff:02:9b:37:
         ea:2a:45:7f:a3:88:65:81:ad:6c:a0:8d:ef:2d:45:ed:67:f4:
         00:d0:c5:c8:3f:a9:ef:67:a5:2b:c9:58:61:d0:65:43:a6:ff:
         59:fa:a9:2f:ad:03:a0:82:a5:cb:ff:c5:1c:d2:9b:50:62:86:
         5a:91:a7:9f:79:af:0b:09:55:d8:64:bf:f8:26:c7:6f:ae:c1:
         f2:d0:19:84:b8:94:e1:47:90:08:07:74:34:6b:40:20:0c:ea:
         ab:ab:d3:79:4d:54:c0:36:51:20:c9:1b:9c:d8:7c:70:5d:d1:
         3c:6f:1a:fe:06:22:84:0f:a8:85:9f:01:25:d6:7d:2e:7a:46:
         e4:cc:a7:a6:83:21:d7:33:96:9e:7f:16:fb:a8:92:49:d7:d1:
         cc:e2:02:be:a9:d0:4f:40:af:5f:79:8a:8a:43:00:2b:99:4d:
         f4:5d:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:57 2025 by rpki-client